Identity Federation for AWS Documentation

Identity Federation for Amazon Web Services (AWS) is an Identity Broker/Token Vendor that provides temporary security credentials to Atlassian groups and enables access control to AWS Resources via Identity and Access Management (IAM) Policies.

It exposes these via a REST API for other Add-ons, and also provides Single Sign-On (SSO) to the AWS Management Console:

• AWS Connector management - add AWS Account Credentials once and configure access to AWS Resources for Atlassian groups with temporary AWS Credentials and fine grained control via IAM Policies thereafter.
• Single Sign-On (SSO) to the AWS Management Console - access AWS Resources directly via menu links and/or a configurable AWS Management Console Login Gadget.
• REST API for temporary AWS Credentials - expose AWS Connectors to requesting users with sufficient permissions and allow retrieval of temporary AWS credentials based on such a connector.